Date: Tue, 13 Aug 2002 23:23:32 -0400 (EDT) From: Chuck Robey <chuckr@chuckr.org> To: Sean Hamilton <sh@planetquake.com> Cc: <hackers@FreeBSD.ORG> Subject: Re: IP monitoring Message-ID: <20020813231956.J497-100000@april.chuckr.org> In-Reply-To: <000a01c2433c$b0e96620$f019e8d8@slugabed.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 13 Aug 2002, Sean Hamilton wrote: > Also, forgot to mention, I will need to look inside TCP streams, and know > which user owns them, and which packets pertain to which TCP stream, which > is why I was thinking a module would be more suitable. If I did this in user > space, I'd have to reconstruct the streams myself (but as I understand, that > isn't amazingly difficult.) If you do it in user space it's a lot easier to debug. It can be done, of course, in both places, but general IO is easy in userspace too (for user interaction, if you need it). You can also make such a thing portable in user space, which is hard to do in the kernel. The downside is, there's copies of the data to consider (more work to be done means less time to do it in), so you might have too much traffic under some conditions, depending on what you're doing. ---------------------------------------------------------------------------- Chuck Robey | Interests include C & Java programming, FreeBSD, chuckr@chuckr.org | electronics, communications, and signal processing. New Year's Resolution: I will not sphroxify gullible people into looking up fictitious words in the dictionary. ---------------------------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020813231956.J497-100000>